Skip to content

README.md

Latest commit

 

History

History
225 lines (158 loc) · 10.4 KB

README.md

File metadata and controls

225 lines (158 loc) · 10.4 KB

Security+ Reference Dossier — Interactive Study Guide

alt text

Security+ HTML5 CSS3 JavaScript

📚 About

Security+ Reference Dossier is an interactive, browser-based study guide for the CompTIA Security+ SY0-701 certification exam. This comprehensive reference tool covers all five domains with detailed definitions, contextual examples, and expandable explanations for over 140 security terms.

Designed with a classified dossier aesthetic, this tool helps security professionals, students, and exam candidates master essential security concepts through an intuitive, searchable interface. Each term includes a concise definition, a practical example, and an expandable section with deeper explanations.

🎯 Domains Covered

Domain Title Exam Weight Terms
01 General Security Concepts 12% Security control types, cryptography, change management
02 Threats, Vulnerabilities & Mitigations 22% Threat actors, attack vectors, malware, vulnerabilities
03 Security Architecture 18% Cloud models, network security, data protection, resilience
04 Security Operations 28% Automation, incident response, forensics, monitoring
05 Security Program Management & Oversight 20% Governance, risk management, compliance, third-party risk

alt text

✨ Key Features

🔍 Smart Search & Filtering

  • Real-time search across terms, definitions, and examples
  • Domain filtering — view terms from specific exam domains
  • Keyboard shortcuts: / to focus search, Esc to clear
  • Live statistics showing visible terms and domain counts

alt text

📖 Expandable Term Cards

  • Click any term row to expand and view:
    • Full definition with detailed explanation
    • Contextual example showing real-world application
  • Expand/collapse subsections for focused study

alt text

🎨 Classified Dossier Design

  • Vintage government document aesthetic
  • Color-coded domain sections (Red, Blue, Green, Purple, Orange)
  • Typewriter-style typography (Special Elite, Courier Prime)
  • Paper texture with subtle grain overlay
  • Classification stamps and document markings

📊 Term Coverage by Domain

Domain Key Topics Covered
D1 Control types (preventive, detective, corrective, deterrent), AAA, CIA triad, Zero Trust, honeypots, encryption types, PKI, hashing
D2 Threat actors (nation-state, organized crime, hacktivist, insider), phishing variants, supply chain attacks, SQLi, XSS, DDoS, ransomware
D3 Cloud models (IaaS/PaaS/SaaS), microservices, containers, network segmentation, firewalls, IDS/IPS, VPN, DLP, HA, DR, RTO/RPO
D4 Automation benefits, incident response lifecycle (PICERL), forensics, chain of custody, threat hunting, log sources (application, endpoint, network)
D5 Governance (policies, data roles), risk management (quantitative/qualitative, SLE/ALE), third-party risk (vendor assessment, SLA, NDA), compliance (GDPR, right to be forgotten), audits, awareness training

🛠️ Technical Implementation

Tech Stack

Technology Purpose
HTML5 Semantic document structure
CSS3 Custom styling, animations, responsive layout
JavaScript Interactive search, filtering, expand/collapse functionality
Google Fonts Special Elite (headings), Courier Prime (monospace), Bebas Neue (display)

Key Functions

// Expand term row to show full definition
function expand(row) { ... }

// Toggle subsection open/closed
function toggleSub(header) { ... }

// Apply search and domain filters
function applyFilters() { ... }

// Highlight matching search terms
function applyHL(row, term) { ... }

Interactive Features

Feature Implementation
Search Real-time filtering with term highlighting
Domain Filter 6 filter buttons (All + 5 domains)
Expandable Rows Click any term to expand/collapse detailed view
Subsection Toggle Click headers to expand/collapse term groups
Keyboard Shortcuts / = focus search, Esc = clear search
Live Counters Dynamic term counts update with filters

🎮 Usage Guide

Navigation

  1. Filter by Domain — Use colored buttons at the top to view specific exam domains
  2. Search Terms — Type in the search box to find terms by name, definition, or example
  3. Expand Terms — Click any term row to view the full definition and example
  4. Toggle Sections — Click subsection headers to expand/collapse groups of terms

Keyboard Shortcuts

Key Action
/ Focus search input
Esc Clear search and reset filters
Click Expand/collapse term details

Study Tips

  1. Start with Domain 1 — Build foundational knowledge
  2. Use the search feature — Quickly find specific concepts
  3. Expand terms — Read the full definitions and examples
  4. Practice recall — Try to define terms before expanding
  5. Focus on weak domains — Filter by domains where you need improvement

📋 Term Examples

Security Control Types

Term Definition Example
Preventive Stops incidents before they occur Firewalls, encryption, MFA
Detective Identifies incidents in progress IDS, SIEM alerts, logging
Corrective Responds to and rectifies incidents Patching, backup restoration
Deterrent Discourages potential attackers Warning signs, surveillance cameras

Threat Actors

Actor Motivation Example
Nation-State Espionage, geopolitical advantage APT28, APT29
Organized Crime Financial gain Ransomware gangs, carding rings
Hacktivist Political/social causes Anonymous, WikiLeaks
Insider Revenge, financial gain, espionage Disgruntled employees

🚀 Future Enhancements

  • Add flashcard mode for active recall practice
  • Include practice quiz questions for each domain
  • Add bookmarking for frequently reviewed terms
  • Export study notes as PDF
  • Dark mode / light mode toggle
  • Add audio pronunciation for technical terms
  • Link to official CompTIA exam objectives
  • Add "Study Progress" tracking with local storage
  • Include real-world breach examples for each vulnerability type
  • Add cross-references between related terms

📁 Project Structure

Security-Plus-Reference-Dossier/
├── index.html          # Complete single-page application
├── README.md           # Project documentation
└── assets/             # (Optional) Images, fonts

📝 License

MIT License — See LICENSE file for details.

🙏🏿 Acknowledgments

  • CompTIA — Security+ SY0-701 exam objectives
  • NIST — Cybersecurity framework and guidelines
  • Google Fonts — Special Elite, Courier Prime, Bebas Neue
  • Security Community — Real-world examples and scenarios

📧 Contact

🔒 Security+ Reference Dossier — Complete SY0-701 Exam Preparation 🔒
All 5 Domains · 140+ Terms · Interactive Study Guide

Last updated: April 2026